Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CERTFR-2026-AVI-1158
Vulnerability from certfr_avis - Published: 2026-09-10 - Updated: 2026-09-10
De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Android versions 14, 15, 16, 16-qpr2, 17 sans le correctif du 05 septembre 2026",
"product": {
"name": "Android",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-21552",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21552"
},
{
"name": "CVE-2026-45198",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45198"
},
{
"name": "CVE-2026-24090",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24090"
},
{
"name": "CVE-2026-28664",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28664"
},
{
"name": "CVE-2026-49918",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49918"
},
{
"name": "CVE-2026-45529",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45529"
},
{
"name": "CVE-2026-0001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0001"
},
{
"name": "CVE-2026-28627",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28627"
},
{
"name": "CVE-2026-28618",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28618"
},
{
"name": "CVE-2026-20502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20502"
},
{
"name": "CVE-2026-20460",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20460"
},
{
"name": "CVE-2026-34192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34192"
},
{
"name": "CVE-2026-20473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20473"
},
{
"name": "CVE-2026-28582",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28582"
},
{
"name": "CVE-2026-49895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49895"
},
{
"name": "CVE-2025-48566",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48566"
},
{
"name": "CVE-2026-24080",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24080"
},
{
"name": "CVE-2026-28603",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28603"
},
{
"name": "CVE-2026-58846",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58846"
},
{
"name": "CVE-2026-28584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28584"
},
{
"name": "CVE-2026-28600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28600"
},
{
"name": "CVE-2026-45519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45519"
},
{
"name": "CVE-2026-52993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-52993"
},
{
"name": "CVE-2026-58820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58820"
},
{
"name": "CVE-2026-49932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49932"
},
{
"name": "CVE-2026-41158",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41158"
},
{
"name": "CVE-2026-49926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49926"
},
{
"name": "CVE-2026-28657",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28657"
},
{
"name": "CVE-2026-28606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28606"
},
{
"name": "CVE-2026-28638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28638"
},
{
"name": "CVE-2026-28642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28642"
},
{
"name": "CVE-2026-28634",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28634"
},
{
"name": "CVE-2026-28581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28581"
},
{
"name": "CVE-2026-34196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34196"
},
{
"name": "CVE-2026-25259",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25259"
},
{
"name": "CVE-2026-34193",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34193"
},
{
"name": "CVE-2026-28658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28658"
},
{
"name": "CVE-2026-28620",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28620"
},
{
"name": "CVE-2026-28613",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28613"
},
{
"name": "CVE-2026-28622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28622"
},
{
"name": "CVE-2025-48565",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48565"
},
{
"name": "CVE-2026-55294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55294"
},
{
"name": "CVE-2026-28614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28614"
},
{
"name": "CVE-2026-28590",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28590"
},
{
"name": "CVE-2026-28663",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28663"
},
{
"name": "CVE-2026-20469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20469"
},
{
"name": "CVE-2025-48651",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48651"
},
{
"name": "CVE-2026-22164",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22164"
},
{
"name": "CVE-2026-20504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20504"
},
{
"name": "CVE-2026-20497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20497"
},
{
"name": "CVE-2026-24079",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24079"
},
{
"name": "CVE-2026-24092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24092"
},
{
"name": "CVE-2026-0054",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0054"
},
{
"name": "CVE-2026-20458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20458"
},
{
"name": "CVE-2026-25289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25289"
},
{
"name": "CVE-2026-22166",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22166"
},
{
"name": "CVE-2026-28666",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28666"
},
{
"name": "CVE-2026-21733",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21733"
},
{
"name": "CVE-2026-28668",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28668"
},
{
"name": "CVE-2026-24091",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24091"
},
{
"name": "CVE-2026-28607",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28607"
},
{
"name": "CVE-2026-20477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20477"
},
{
"name": "CVE-2026-28602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28602"
},
{
"name": "CVE-2026-21734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21734"
},
{
"name": "CVE-2026-45197",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45197"
},
{
"name": "CVE-2026-28596",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28596"
},
{
"name": "CVE-2026-20503",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20503"
},
{
"name": "CVE-2026-27280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27280"
},
{
"name": "CVE-2026-45517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45517"
},
{
"name": "CVE-2026-28660",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28660"
},
{
"name": "CVE-2026-24088",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24088"
},
{
"name": "CVE-2026-28671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28671"
},
{
"name": "CVE-2026-55256",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55256"
},
{
"name": "CVE-2026-34194",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34194"
},
{
"name": "CVE-2026-28633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28633"
},
{
"name": "CVE-2026-12387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12387"
},
{
"name": "CVE-2026-45527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45527"
},
{
"name": "CVE-2026-28662",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28662"
},
{
"name": "CVE-2026-5729",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5729"
},
{
"name": "CVE-2026-28631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28631"
},
{
"name": "CVE-2026-55277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55277"
},
{
"name": "CVE-2026-45196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45196"
},
{
"name": "CVE-2026-0084",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0084"
},
{
"name": "CVE-2026-20481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20481"
},
{
"name": "CVE-2026-28655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28655"
},
{
"name": "CVE-2026-55273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55273"
},
{
"name": "CVE-2026-28656",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28656"
},
{
"name": "CVE-2026-45521",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45521"
},
{
"name": "CVE-2026-45531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45531"
},
{
"name": "CVE-2026-55285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55285"
},
{
"name": "CVE-2026-49882",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49882"
},
{
"name": "CVE-2026-45195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45195"
},
{
"name": "CVE-2026-49927",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49927"
},
{
"name": "CVE-2026-25260",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25260"
},
{
"name": "CVE-2026-28650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28650"
},
{
"name": "CVE-2026-28594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28594"
},
{
"name": "CVE-2026-21548",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21548"
},
{
"name": "CVE-2026-45520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45520"
},
{
"name": "CVE-2026-24087",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24087"
},
{
"name": "CVE-2026-7639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7639"
},
{
"name": "CVE-2026-45203",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45203"
},
{
"name": "CVE-2026-25294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25294"
},
{
"name": "CVE-2026-49744",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49744"
},
{
"name": "CVE-2026-7476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7476"
},
{
"name": "CVE-2026-28583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28583"
},
{
"name": "CVE-2026-20501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20501"
},
{
"name": "CVE-2026-28623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28623"
},
{
"name": "CVE-2026-28609",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28609"
},
{
"name": "CVE-2026-28653",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28653"
},
{
"name": "CVE-2026-20461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20461"
},
{
"name": "CVE-2026-33636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33636"
},
{
"name": "CVE-2026-4967",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4967"
},
{
"name": "CVE-2026-28652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28652"
},
{
"name": "CVE-2026-20468",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20468"
},
{
"name": "CVE-2026-49743",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49743"
},
{
"name": "CVE-2026-21383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21383"
},
{
"name": "CVE-2026-28636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28636"
},
{
"name": "CVE-2026-28611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28611"
},
{
"name": "CVE-2026-0010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0010"
},
{
"name": "CVE-2026-21732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21732"
},
{
"name": "CVE-2026-7477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7477"
},
{
"name": "CVE-2025-48564",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48564"
},
{
"name": "CVE-2026-58941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58941"
},
{
"name": "CVE-2026-58848",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58848"
},
{
"name": "CVE-2026-58823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58823"
},
{
"name": "CVE-2026-28644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28644"
},
{
"name": "CVE-2026-28616",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28616"
},
{
"name": "CVE-2026-0008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0008"
},
{
"name": "CVE-2026-41156",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41156"
},
{
"name": "CVE-2026-49746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49746"
},
{
"name": "CVE-2026-45525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45525"
},
{
"name": "CVE-2026-12285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12285"
},
{
"name": "CVE-2026-49745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49745"
},
{
"name": "CVE-2026-49887",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49887"
},
{
"name": "CVE-2026-28612",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28612"
},
{
"name": "CVE-2026-45515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45515"
},
{
"name": "CVE-2026-20500",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20500"
},
{
"name": "CVE-2026-25288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25288"
},
{
"name": "CVE-2026-20457",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20457"
},
{
"name": "CVE-2026-28599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28599"
},
{
"name": "CVE-2026-41157",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41157"
},
{
"name": "CVE-2026-28630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28630"
},
{
"name": "CVE-2026-45200",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45200"
},
{
"name": "CVE-2026-49913",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49913"
},
{
"name": "CVE-2026-49881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49881"
},
{
"name": "CVE-2026-21553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21553"
},
{
"name": "CVE-2026-24081",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24081"
},
{
"name": "CVE-2026-45202",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45202"
},
{
"name": "CVE-2026-24084",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24084"
},
{
"name": "CVE-2026-20459",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20459"
},
{
"name": "CVE-2026-20464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20464"
},
{
"name": "CVE-2026-0065",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0065"
},
{
"name": "CVE-2026-28617",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28617"
},
{
"name": "CVE-2026-45518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45518"
},
{
"name": "CVE-2026-28639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28639"
},
{
"name": "CVE-2026-34195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34195"
},
{
"name": "CVE-2026-20479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20479"
},
{
"name": "CVE-2026-58822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58822"
},
{
"name": "CVE-2026-20474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20474"
},
{
"name": "CVE-2026-45528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45528"
},
{
"name": "CVE-2026-58839",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58839"
},
{
"name": "CVE-2026-43049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43049"
},
{
"name": "CVE-2026-28624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28624"
},
{
"name": "CVE-2026-21549",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21549"
},
{
"name": "CVE-2026-20475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20475"
},
{
"name": "CVE-2026-25275",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25275"
},
{
"name": "CVE-2026-49921",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49921"
},
{
"name": "CVE-2026-28626",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28626"
},
{
"name": "CVE-2026-28572",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28572"
},
{
"name": "CVE-2026-28593",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28593"
},
{
"name": "CVE-2026-21551",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21551"
},
{
"name": "CVE-2026-49919",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49919"
},
{
"name": "CVE-2026-58874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58874"
},
{
"name": "CVE-2026-21550",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21550"
},
{
"name": "CVE-2026-49879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49879"
},
{
"name": "CVE-2026-28604",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28604"
},
{
"name": "CVE-2026-31629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31629"
},
{
"name": "CVE-2026-20467",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20467"
},
{
"name": "CVE-2026-49884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-49884"
},
{
"name": "CVE-2026-55290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55290"
}
],
"initial_release_date": "2026-09-10T00:00:00",
"last_revision_date": "2026-09-10T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1158",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
"vendor_advisories": [
{
"published_at": "2026-09-07",
"title": "Bulletin de s\u00e9curit\u00e9 Google Android",
"url": "https://source.android.com/docs/security/bulletin/2026/2026-09-01?hl=fr"
}
]
}
CVE-2026-21732 (GCVE-0-2026-21732)
Vulnerability from cvelistv5 – Published: 2026-03-20 22:48 – Updated: 2026-03-23 15:03
VLAI
EPSS
VEX
Title
GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation
Summary
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.
An edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access.
Severity
9.6 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-03-23 15:03 UTC
CWE
- CWE-823 - Use of Out-of-range Pointer Offset (4.16)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Imagination Technologies | Graphics DDK |
Unaffected:
1.17 RTM
(custom)
Unaffected: 1.18 RTM (custom) Affected: 23.2 RTM (custom) Affected: 24.1 RTM , ≤ 25.1 RTM (custom) Unaffected: 25.2 RTM (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-21732",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-23T15:03:27.343812Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-23T15:03:50.302Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Linux",
"Android"
],
"product": "Graphics DDK",
"vendor": "Imagination Technologies",
"versions": [
{
"status": "unaffected",
"version": "1.17 RTM",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "1.18 RTM",
"versionType": "custom"
},
{
"status": "affected",
"version": "23.2 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "25.1 RTM",
"status": "affected",
"version": "24.1 RTM",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "25.2 RTM",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\u003cbr\u003e\n\u003cbr\u003eAn edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access."
}
],
"value": "A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\n\n\nAn edge case using a very large value in switch statements in GPU shader code can cause a segmentation fault in the GPU shader compiler due to an out-of-bounds write access."
}
],
"impacts": [
{
"capecId": "CAPEC-113",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-113: Interface Manipulation (Version 3.9)"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-823",
"description": "CWE-823: Use of Out-of-range Pointer Offset (4.16)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-20T22:48:42.695Z",
"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"shortName": "imaginationtech"
},
"references": [
{
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "GPU DDK - libusc OOB write at ConvertSwitchToArrayLookupBP during WebGPU shader compilation",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"assignerShortName": "imaginationtech",
"cveId": "CVE-2026-21732",
"datePublished": "2026-03-20T22:48:42.695Z",
"dateReserved": "2026-01-05T11:57:27.257Z",
"dateUpdated": "2026-03-23T15:03:50.302Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-21733 (GCVE-0-2026-21733)
Vulnerability from cvelistv5 – Published: 2026-04-17 16:08 – Updated: 2026-06-26 15:07
VLAI
EPSS
VEX
Title
GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)
Summary
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files.
This is caused by improper handling of GPU memory reservation protections.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-17 17:20 UTC
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Imagination Technologies | Graphics DDK |
Affected:
1.18 RTM
(custom)
Affected: 23.2 RTM (custom) Affected: 24.1 RTM , ≤ 24.2 RTM (custom) Affected: 25.1 RTM , ≤ 25.3 RTM (custom) Unaffected: 26.1 RTM (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-21733",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-17T17:20:11.006304Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-10T20:00:46.844Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Linux",
"Android"
],
"product": "Graphics DDK",
"vendor": "Imagination Technologies",
"versions": [
{
"status": "affected",
"version": "1.18 RTM",
"versionType": "custom"
},
{
"status": "affected",
"version": "23.2 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "24.2 RTM",
"status": "affected",
"version": "24.1 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "25.3 RTM",
"status": "affected",
"version": "25.1 RTM",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "26.1 RTM",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files.\n\u003cbr\u003e\n\u003cbr\u003eThis is caused by improper handling of GPU memory reservation protections."
}
],
"value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files.\n\n\n\nThis is caused by improper handling of GPU memory reservation protections."
}
],
"impacts": [
{
"capecId": "CAPEC-679",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-679: Exploitation of Improperly Configured or Implemented Memory Protections"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-280",
"description": "CWE-280: Improper Handling of Insufficient Permissions or Privileges",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-26T15:07:33.429Z",
"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"shortName": "imaginationtech"
},
"references": [
{
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "GPU DDK - Incorrect flags validation in RGXDerivePTEProt8 can allow GPU to overwrite read-only shared memory (e.g. libc.so)",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"assignerShortName": "imaginationtech",
"cveId": "CVE-2026-21733",
"datePublished": "2026-04-17T16:08:25.661Z",
"dateReserved": "2026-01-05T11:57:27.258Z",
"dateUpdated": "2026-06-26T15:07:33.429Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-21734 (GCVE-0-2026-21734)
Vulnerability from cvelistv5 – Published: 2026-06-26 15:14 – Updated: 2026-06-26 19:13
VLAI
EPSS
VEX
Title
GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation
Summary
A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.
An edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.
Severity
7.7 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-26 19:12 UTC
CWE
- CWE-823 - Use of Out-of-range Pointer Offset (4.16)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Imagination Technologies | Graphics DDK |
Affected:
1.18 RTM
(custom)
Affected: 23.2 RTM (custom) Affected: 24.1 RTM , ≤ 24.2 RTM (custom) Affected: 25.1 RTM , ≤ 25.3 RTM (custom) Unaffected: 26.1 RTM (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-21734",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-26T19:12:05.663656Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-26T19:13:09.026Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Linux",
"Android"
],
"product": "Graphics DDK",
"vendor": "Imagination Technologies",
"versions": [
{
"status": "affected",
"version": "1.18 RTM",
"versionType": "custom"
},
{
"status": "affected",
"version": "23.2 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "24.2 RTM",
"status": "affected",
"version": "24.1 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "25.3 RTM",
"status": "affected",
"version": "25.1 RTM",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "26.1 RTM",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\u003c/p\u003e\u003cp\u003eAn edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write.\u003c/p\u003e"
}
],
"value": "A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library. On certain platforms, when the compiler process has system privileges this could enable further exploits on the device.\n\n\n\nAn edge case using a very small value in GPU shader code can cause a segmentation fault in the GPU shader compiler due to am out-of-bounds write."
}
],
"impacts": [
{
"capecId": "CAPEC-113",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-113: Interface Manipulation (Version 3.9)"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-823",
"description": "CWE-823: Use of Out-of-range Pointer Offset (4.16)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-26T15:14:00.365Z",
"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"shortName": "imaginationtech"
},
"references": [
{
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "GPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"assignerShortName": "imaginationtech",
"cveId": "CVE-2026-21734",
"datePublished": "2026-06-26T15:14:00.365Z",
"dateReserved": "2026-01-05T11:57:27.258Z",
"dateUpdated": "2026-06-26T19:13:09.026Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-22164 (GCVE-0-2026-22164)
Vulnerability from cvelistv5 – Published: 2026-06-08 14:53 – Updated: 2026-06-08 18:19
VLAI
EPSS
VEX
Title
GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical
Summary
Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.
By creating resources of certain types and presenting a set of parameters to the affected interface the exploit can be used to corrupt kernel memory.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-08 18:18 UTC
CWE
- CWE-122 - Heap-based Buffer Overflow (4.16)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Imagination Technologies | Graphics DDK |
Unaffected:
1.18 RTM
(custom)
Unaffected: 23.2 RTM (custom) Affected: 24.2 RTM (custom) Affected: 25.1 RTM , ≤ 25.3 RTM (custom) Affected: 26.1 RTM (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-22164",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-08T18:18:48.486523Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-08T18:19:11.636Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Linux",
"Android"
],
"product": "Graphics DDK",
"vendor": "Imagination Technologies",
"versions": [
{
"status": "unaffected",
"version": "1.18 RTM",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "23.2 RTM",
"versionType": "custom"
},
{
"status": "affected",
"version": "24.2 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "25.3 RTM",
"status": "affected",
"version": "25.1 RTM",
"versionType": "custom"
},
{
"status": "affected",
"version": "26.1 RTM",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.\n\u003cbr\u003e\n\u003cbr\u003eBy creating resources of certain types and presenting a set of parameters to the affected interface the exploit can be used to corrupt kernel memory."
}
],
"value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.\n\n\n\nBy creating resources of certain types and presenting a set of parameters to the affected interface the exploit can be used to corrupt kernel memory."
}
],
"impacts": [
{
"capecId": "CAPEC-113",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-113: Interface Manipulation (Version 3.9)"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow (4.16)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-08T14:53:26.861Z",
"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"shortName": "imaginationtech"
},
"references": [
{
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "GPU DDK - Kernel heap OOB write in DevmemIntComputeVirtualIndicesFromLogical",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"assignerShortName": "imaginationtech",
"cveId": "CVE-2026-22164",
"datePublished": "2026-06-08T14:53:26.861Z",
"dateReserved": "2026-01-06T15:50:36.204Z",
"dateUpdated": "2026-06-08T18:19:11.636Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-22166 (GCVE-0-2026-22166)
Vulnerability from cvelistv5 – Published: 2026-05-01 15:59 – Updated: 2026-05-01 19:19
VLAI
EPSS
VEX
Title
GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable
Summary
A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-01 18:00 UTC
CWE
- CWE-416 - Use After Free
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Imagination Technologies | Graphics DDK |
Affected:
1.18 RTM
(custom)
Affected: 23.2 RTM (custom) Affected: 24.1 RTM , ≤ 24.2 RTM (custom) Affected: 25.1 RTM , ≤ 25.3 RTM (custom) Unaffected: 26.1 RTM (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-22166",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-01T18:00:04.437959Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-01T19:19:02.700Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"platforms": [
"Linux",
"Android"
],
"product": "Graphics DDK",
"vendor": "Imagination Technologies",
"versions": [
{
"status": "affected",
"version": "1.18 RTM",
"versionType": "custom"
},
{
"status": "affected",
"version": "23.2 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "24.2 RTM",
"status": "affected",
"version": "24.1 RTM",
"versionType": "custom"
},
{
"lessThanOrEqual": "25.3 RTM",
"status": "affected",
"version": "25.1 RTM",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "26.1 RTM",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system."
}
],
"value": "A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library. On certain platforms, when the process executing graphics workload has system privileges this could enable subsequent exploit on the system."
}
],
"impacts": [
{
"capecId": "CAPEC-124",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-124: Shared Resource Manipulation (Version 3.9)"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416: Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-01T15:59:56.871Z",
"orgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"shortName": "imaginationtech"
},
"references": [
{
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "GPU DDK - Write UAF in KEGLGetPoolBuffers, WebGL reachable",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "367425dc-4d06-4041-9650-c2dc6aaa27ce",
"assignerShortName": "imaginationtech",
"cveId": "CVE-2026-22166",
"datePublished": "2026-05-01T15:59:56.871Z",
"dateReserved": "2026-01-06T15:50:36.205Z",
"dateUpdated": "2026-05-01T19:19:02.700Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-24079 (GCVE-0-2026-24079)
Vulnerability from cvelistv5 – Published: 2026-08-04 15:07 – Updated: 2026-08-05 13:37
VLAI
EPSS
VEX
Title
Missing Authentication for Critical Function in Data Modem
Summary
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-05 03:56 UTC
CWE
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Affected:
AR8035
Affected: CSRA6620 Affected: CSRA6640 Affected: FastConnect 6200 Affected: FastConnect 6700 Affected: FastConnect 6800 Affected: FastConnect 6900 Affected: FastConnect 7800 Affected: FSM200 Platform Affected: FSM20055 Affected: FWA Gen 3 Ultra Platform Affected: G1 Gen 1 Affected: Milos Affected: Netrani Affected: Orne Affected: Palawan25 Affected: QCA6174A Affected: QCA6391 Affected: QCA6574AU Affected: QCA6584AU Affected: QCA6595AU Affected: QCA6678AQ Affected: QCA6688AQ Affected: QCA6696 Affected: QCA6698AQ Affected: QCA6698AU Affected: QCA6797AQ Affected: QCA8081 Affected: QCA8337 Affected: QCC710 Affected: QCM2290 Affected: QCM4325 Affected: QCM4490 Affected: QCM5430 Affected: QCM6490 Affected: QCN6024 Affected: QCN6224 Affected: QCN6274 Affected: QCN9011 Affected: QCN9012 Affected: QCN9024 Affected: QCS2290 Affected: QCS4290 Affected: QCS4490 Affected: QCS8550 Affected: QEP8111 Affected: QFW7114 Affected: QFW7124 Affected: QMP1000 Affected: Qualcomm Video Collaboration VC3 Platform Affected: Robotics RB2 Platform Affected: SD 8 Gen1 5G Affected: SD662 Affected: SDX61 Affected: SM6225P Affected: SM6650P Affected: SM7325P Affected: SM7435 Affected: SM7550 Affected: SM7550P Affected: SM7635P Affected: SM7675 Affected: SM7675P Affected: SM8475P Affected: SM8550P Affected: SM8635 Affected: SM8635P Affected: SM8650Q Affected: SM8750P Affected: Snapdragon 4 Gen 1 Mobile Platform Affected: Snapdragon 4 Gen 2 Mobile Platform Affected: Snapdragon 460 Mobile Platform Affected: Snapdragon 480 5G Mobile Platform Affected: Snapdragon 480+ 5G Mobile Platform Affected: Snapdragon 6 Gen 1 Mobile Platform Affected: Snapdragon 6 Gen 3 Mobile Platform Affected: Snapdragon 6 Gen 4 Mobile Platform Affected: Snapdragon 662 Mobile Platform Affected: Snapdragon 680 4G Mobile Platform Affected: Snapdragon 685 4G Mobile Platform Affected: Snapdragon 690 5G Mobile Platform Affected: Snapdragon 695 5G Mobile Platform Affected: Snapdragon 7 Gen 1 Mobile Platform Affected: Snapdragon 7+ Gen 2 Mobile Platform Affected: Snapdragon 778G 5G Mobile Platform Affected: Snapdragon 778G+ 5G Mobile Platform Affected: Snapdragon 782G Mobile Platform Affected: Snapdragon 7c+ Gen 3 Compute Affected: Snapdragon 7s Gen 3 Mobile Platform Affected: Snapdragon 8 Elite Affected: Snapdragon 8 Gen 1 Mobile Platform Affected: Snapdragon 8 Gen 2 Mobile Platform Affected: Snapdragon 8 Gen 3 Mobile Platform Affected: Snapdragon 8+ Gen 1 Mobile Platform Affected: Snapdragon 8+ Gen 2 Mobile Platform Affected: Snapdragon 865 5G Mobile Platform Affected: Snapdragon 865+ 5G Mobile Platform Affected: Snapdragon 870 5G Mobile Platform Affected: Snapdragon 888 5G Mobile Platform Affected: Snapdragon 888+ 5G Mobile Platform Affected: Snapdragon Auto 5G Modem-RF Affected: Snapdragon Auto 5G Modem-RF Gen 2 Affected: Snapdragon W5+ Gen 1 Wearable Platform Affected: Snapdragon X32 5G Modem-RF System Affected: Snapdragon X35 5G Modem-RF System Affected: Snapdragon X53 5G Modem-RF System Affected: Snapdragon X55 5G Modem-RF System Affected: Snapdragon X65 5G Modem-RF System Affected: Snapdragon X72 5G Modem-RF System Affected: Snapdragon X75 5G Modem-RF System Affected: SW5100 Affected: SW5100P Affected: SW6100 Affected: SW6100P Affected: Themisto Affected: WCD9335 Affected: WCD9340 Affected: WCD9370 Affected: WCD9371 Affected: WCD9375 Affected: WCD9378 Affected: WCD9380 Affected: WCD9385 Affected: WCD9390 Affected: WCD9395 Affected: WCN3910 Affected: WCN3950 Affected: WCN3980 Affected: WCN3988 Affected: WCN6650 Affected: WCN6755 Affected: WCN7860 Affected: WCN7861 Affected: WCN7880 Affected: WCN7881 Affected: WSA8810 Affected: WSA8815 Affected: WSA8830 Affected: WSA8832 Affected: WSA8835 Affected: WSA8840 Affected: WSA8845 Affected: WSA8845H |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-24079",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-05T03:56:28.353360Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T13:37:19.560Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Auto",
"Snapdragon Compute",
"Snapdragon Consumer IOT",
"Snapdragon Industrial IOT",
"Snapdragon Mobile",
"Snapdragon Small Cell",
"Snapdragon WBC",
"Snapdragon Wearables"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "AR8035"
},
{
"status": "affected",
"version": "CSRA6620"
},
{
"status": "affected",
"version": "CSRA6640"
},
{
"status": "affected",
"version": "FastConnect 6200"
},
{
"status": "affected",
"version": "FastConnect 6700"
},
{
"status": "affected",
"version": "FastConnect 6800"
},
{
"status": "affected",
"version": "FastConnect 6900"
},
{
"status": "affected",
"version": "FastConnect 7800"
},
{
"status": "affected",
"version": "FSM200 Platform"
},
{
"status": "affected",
"version": "FSM20055"
},
{
"status": "affected",
"version": "FWA Gen 3 Ultra Platform"
},
{
"status": "affected",
"version": "G1 Gen 1"
},
{
"status": "affected",
"version": "Milos"
},
{
"status": "affected",
"version": "Netrani"
},
{
"status": "affected",
"version": "Orne"
},
{
"status": "affected",
"version": "Palawan25"
},
{
"status": "affected",
"version": "QCA6174A"
},
{
"status": "affected",
"version": "QCA6391"
},
{
"status": "affected",
"version": "QCA6574AU"
},
{
"status": "affected",
"version": "QCA6584AU"
},
{
"status": "affected",
"version": "QCA6595AU"
},
{
"status": "affected",
"version": "QCA6678AQ"
},
{
"status": "affected",
"version": "QCA6688AQ"
},
{
"status": "affected",
"version": "QCA6696"
},
{
"status": "affected",
"version": "QCA6698AQ"
},
{
"status": "affected",
"version": "QCA6698AU"
},
{
"status": "affected",
"version": "QCA6797AQ"
},
{
"status": "affected",
"version": "QCA8081"
},
{
"status": "affected",
"version": "QCA8337"
},
{
"status": "affected",
"version": "QCC710"
},
{
"status": "affected",
"version": "QCM2290"
},
{
"status": "affected",
"version": "QCM4325"
},
{
"status": "affected",
"version": "QCM4490"
},
{
"status": "affected",
"version": "QCM5430"
},
{
"status": "affected",
"version": "QCM6490"
},
{
"status": "affected",
"version": "QCN6024"
},
{
"status": "affected",
"version": "QCN6224"
},
{
"status": "affected",
"version": "QCN6274"
},
{
"status": "affected",
"version": "QCN9011"
},
{
"status": "affected",
"version": "QCN9012"
},
{
"status": "affected",
"version": "QCN9024"
},
{
"status": "affected",
"version": "QCS2290"
},
{
"status": "affected",
"version": "QCS4290"
},
{
"status": "affected",
"version": "QCS4490"
},
{
"status": "affected",
"version": "QCS8550"
},
{
"status": "affected",
"version": "QEP8111"
},
{
"status": "affected",
"version": "QFW7114"
},
{
"status": "affected",
"version": "QFW7124"
},
{
"status": "affected",
"version": "QMP1000"
},
{
"status": "affected",
"version": "Qualcomm Video Collaboration VC3 Platform"
},
{
"status": "affected",
"version": "Robotics RB2 Platform"
},
{
"status": "affected",
"version": "SD 8 Gen1 5G"
},
{
"status": "affected",
"version": "SD662"
},
{
"status": "affected",
"version": "SDX61"
},
{
"status": "affected",
"version": "SM6225P"
},
{
"status": "affected",
"version": "SM6650P"
},
{
"status": "affected",
"version": "SM7325P"
},
{
"status": "affected",
"version": "SM7435"
},
{
"status": "affected",
"version": "SM7550"
},
{
"status": "affected",
"version": "SM7550P"
},
{
"status": "affected",
"version": "SM7635P"
},
{
"status": "affected",
"version": "SM7675"
},
{
"status": "affected",
"version": "SM7675P"
},
{
"status": "affected",
"version": "SM8475P"
},
{
"status": "affected",
"version": "SM8550P"
},
{
"status": "affected",
"version": "SM8635"
},
{
"status": "affected",
"version": "SM8635P"
},
{
"status": "affected",
"version": "SM8650Q"
},
{
"status": "affected",
"version": "SM8750P"
},
{
"status": "affected",
"version": "Snapdragon 4 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 4 Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 460 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 480 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 480+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 6 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 6 Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 6 Gen 4 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 662 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 680 4G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 685 4G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 690 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 695 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 7 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 7+ Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 778G 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 778G+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 782G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 7c+ Gen 3 Compute"
},
{
"status": "affected",
"version": "Snapdragon 7s Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Elite"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8+ Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8+ Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 865 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 865+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 870 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 888 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 888+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon Auto 5G Modem-RF"
},
{
"status": "affected",
"version": "Snapdragon Auto 5G Modem-RF Gen 2"
},
{
"status": "affected",
"version": "Snapdragon W5+ Gen 1 Wearable Platform"
},
{
"status": "affected",
"version": "Snapdragon X32 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X35 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X53 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X55 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X65 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X72 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X75 5G Modem-RF System"
},
{
"status": "affected",
"version": "SW5100"
},
{
"status": "affected",
"version": "SW5100P"
},
{
"status": "affected",
"version": "SW6100"
},
{
"status": "affected",
"version": "SW6100P"
},
{
"status": "affected",
"version": "Themisto"
},
{
"status": "affected",
"version": "WCD9335"
},
{
"status": "affected",
"version": "WCD9340"
},
{
"status": "affected",
"version": "WCD9370"
},
{
"status": "affected",
"version": "WCD9371"
},
{
"status": "affected",
"version": "WCD9375"
},
{
"status": "affected",
"version": "WCD9378"
},
{
"status": "affected",
"version": "WCD9380"
},
{
"status": "affected",
"version": "WCD9385"
},
{
"status": "affected",
"version": "WCD9390"
},
{
"status": "affected",
"version": "WCD9395"
},
{
"status": "affected",
"version": "WCN3910"
},
{
"status": "affected",
"version": "WCN3950"
},
{
"status": "affected",
"version": "WCN3980"
},
{
"status": "affected",
"version": "WCN3988"
},
{
"status": "affected",
"version": "WCN6650"
},
{
"status": "affected",
"version": "WCN6755"
},
{
"status": "affected",
"version": "WCN7860"
},
{
"status": "affected",
"version": "WCN7861"
},
{
"status": "affected",
"version": "WCN7880"
},
{
"status": "affected",
"version": "WCN7881"
},
{
"status": "affected",
"version": "WSA8810"
},
{
"status": "affected",
"version": "WSA8815"
},
{
"status": "affected",
"version": "WSA8830"
},
{
"status": "affected",
"version": "WSA8832"
},
{
"status": "affected",
"version": "WSA8835"
},
{
"status": "affected",
"version": "WSA8840"
},
{
"status": "affected",
"version": "WSA8845"
},
{
"status": "affected",
"version": "WSA8845H"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cryptographic Issue while processing registration requests with malformed or missing authentication parameters."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:07:17.155Z",
"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"shortName": "qualcomm"
},
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"
}
],
"title": "Missing Authentication for Critical Function in Data Modem"
}
},
"cveMetadata": {
"assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"assignerShortName": "qualcomm",
"cveId": "CVE-2026-24079",
"datePublished": "2026-08-04T15:07:17.155Z",
"dateReserved": "2026-01-21T12:51:13.995Z",
"dateUpdated": "2026-08-05T13:37:19.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-24080 (GCVE-0-2026-24080)
Vulnerability from cvelistv5 – Published: 2026-08-04 15:07 – Updated: 2026-08-05 03:56
VLAI
EPSS
VEX
Title
Buffer Copy Without Checking Size of Input in Biometrics
Summary
Memory Corruption when handling malformed request parameters in the fingerprint TA.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-04 00:00 UTC
CWE
- CWE-120 - Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Affected:
Cologne
Affected: FastConnect 6700 Affected: FastConnect 6900 Affected: FastConnect 7800 Affected: QAM8255P Affected: QAM8295P Affected: QCA6574AU Affected: QCA6595AU Affected: QCA6678AQ Affected: QCA6696 Affected: SA6145P Affected: SA6150P Affected: SA6155P Affected: SA8145P Affected: SA8150P Affected: SA8155P Affected: SA8195P Affected: SA8255P Affected: SA8295P Affected: SA8540P Affected: SA9000P Affected: SW6100 Affected: SW6100P Affected: Themisto Affected: WCD9378C Affected: WSA8840 Affected: WSA8845 Affected: WSA8845H Affected: X2000077 Affected: X2000086 Affected: X2000090 Affected: X2000092 Affected: X2000094 Affected: XG101002 Affected: XG101032 Affected: XG101039 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-24080",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-04T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T03:56:28.839Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Auto",
"Snapdragon Compute",
"Snapdragon Industrial IOT",
"Snapdragon Wearables"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "Cologne"
},
{
"status": "affected",
"version": "FastConnect 6700"
},
{
"status": "affected",
"version": "FastConnect 6900"
},
{
"status": "affected",
"version": "FastConnect 7800"
},
{
"status": "affected",
"version": "QAM8255P"
},
{
"status": "affected",
"version": "QAM8295P"
},
{
"status": "affected",
"version": "QCA6574AU"
},
{
"status": "affected",
"version": "QCA6595AU"
},
{
"status": "affected",
"version": "QCA6678AQ"
},
{
"status": "affected",
"version": "QCA6696"
},
{
"status": "affected",
"version": "SA6145P"
},
{
"status": "affected",
"version": "SA6150P"
},
{
"status": "affected",
"version": "SA6155P"
},
{
"status": "affected",
"version": "SA8145P"
},
{
"status": "affected",
"version": "SA8150P"
},
{
"status": "affected",
"version": "SA8155P"
},
{
"status": "affected",
"version": "SA8195P"
},
{
"status": "affected",
"version": "SA8255P"
},
{
"status": "affected",
"version": "SA8295P"
},
{
"status": "affected",
"version": "SA8540P"
},
{
"status": "affected",
"version": "SA9000P"
},
{
"status": "affected",
"version": "SW6100"
},
{
"status": "affected",
"version": "SW6100P"
},
{
"status": "affected",
"version": "Themisto"
},
{
"status": "affected",
"version": "WCD9378C"
},
{
"status": "affected",
"version": "WSA8840"
},
{
"status": "affected",
"version": "WSA8845"
},
{
"status": "affected",
"version": "WSA8845H"
},
{
"status": "affected",
"version": "X2000077"
},
{
"status": "affected",
"version": "X2000086"
},
{
"status": "affected",
"version": "X2000090"
},
{
"status": "affected",
"version": "X2000092"
},
{
"status": "affected",
"version": "X2000094"
},
{
"status": "affected",
"version": "XG101002"
},
{
"status": "affected",
"version": "XG101032"
},
{
"status": "affected",
"version": "XG101039"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory Corruption when handling malformed request parameters in the fingerprint TA."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy Without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:07:18.485Z",
"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"shortName": "qualcomm"
},
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"
}
],
"title": "Buffer Copy Without Checking Size of Input in Biometrics"
}
},
"cveMetadata": {
"assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"assignerShortName": "qualcomm",
"cveId": "CVE-2026-24080",
"datePublished": "2026-08-04T15:07:18.485Z",
"dateReserved": "2026-01-21T12:51:13.995Z",
"dateUpdated": "2026-08-05T03:56:28.839Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-24084 (GCVE-0-2026-24084)
Vulnerability from cvelistv5 – Published: 2026-08-04 15:07 – Updated: 2026-08-04 15:52
VLAI
EPSS
VEX
Title
Insecure Security Identifier Mechanism in Multi-Mode Call Processor
Summary
Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-04 15:52 UTC
CWE
- CWE-1294 - Insecure Security Identifier Mechanism
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Affected:
5G Fixed Wireless Access Platform
Affected: AQT1000 Affected: AR8035 Affected: FastConnect 6200 Affected: FastConnect 6700 Affected: FastConnect 6800 Affected: FastConnect 6900 Affected: FastConnect 7800 Affected: FWA Gen 3 Ultra Platform Affected: Milos Affected: Netrani Affected: Orne Affected: Palawan25 Affected: QCA6174A Affected: QCA6391 Affected: QCA6420 Affected: QCA6430 Affected: QCA6574AU Affected: QCA6584AU Affected: QCA6595AU Affected: QCA6678AQ Affected: QCA6688AQ Affected: QCA6696 Affected: QCA6698AQ Affected: QCA6698AU Affected: QCA6797AQ Affected: QCA8081 Affected: QCA8337 Affected: QCC710 Affected: QCM4490 Affected: QCM5430 Affected: QCM6490 Affected: QCN6024 Affected: QCN6224 Affected: QCN6274 Affected: QCN9011 Affected: QCN9012 Affected: QCN9024 Affected: QCS4490 Affected: QCS8550 Affected: QFW7114 Affected: QFW7124 Affected: QMP1000 Affected: Qualcomm Video Collaboration VC3 Platform Affected: SD 8 Gen1 5G Affected: SDX57M Affected: SDX61 Affected: SDX71M Affected: SM6650P Affected: SM7325P Affected: SM7435 Affected: SM7550 Affected: SM7550P Affected: SM7635P Affected: SM7675 Affected: SM7675P Affected: SM8475P Affected: SM8550P Affected: SM8635 Affected: SM8635P Affected: SM8650Q Affected: SM8750P Affected: Snapdragon 4 Gen 1 Mobile Platform Affected: Snapdragon 4 Gen 2 Mobile Platform Affected: Snapdragon 480 5G Mobile Platform Affected: Snapdragon 480+ 5G Mobile Platform Affected: Snapdragon 6 Gen 1 Mobile Platform Affected: Snapdragon 6 Gen 3 Mobile Platform Affected: Snapdragon 6 Gen 4 Mobile Platform Affected: Snapdragon 690 5G Mobile Platform Affected: Snapdragon 695 5G Mobile Platform Affected: Snapdragon 7 Gen 1 Mobile Platform Affected: Snapdragon 7+ Gen 2 Mobile Platform Affected: Snapdragon 778G 5G Mobile Platform Affected: Snapdragon 778G+ 5G Mobile Platform Affected: Snapdragon 782G Mobile Platform Affected: Snapdragon 7c+ Gen 3 Compute Affected: Snapdragon 7s Gen 3 Mobile Platform Affected: Snapdragon 8 Elite Affected: Snapdragon 8 Gen 1 Mobile Platform Affected: Snapdragon 8 Gen 2 Mobile Platform Affected: Snapdragon 8 Gen 3 Mobile Platform Affected: Snapdragon 8+ Gen 1 Mobile Platform Affected: Snapdragon 8+ Gen 2 Mobile Platform Affected: Snapdragon 865 5G Mobile Platform Affected: Snapdragon 865+ 5G Mobile Platform Affected: Snapdragon 870 5G Mobile Platform Affected: Snapdragon 888 5G Mobile Platform Affected: Snapdragon 888+ 5G Mobile Platform Affected: Snapdragon 8c Compute Platform "Poipu Lite" Affected: Snapdragon 8cx Compute Platform Affected: Snapdragon 8cx Gen 2 5G Compute Platform "Poipu Pro" Affected: Snapdragon Auto 5G Modem-RF Affected: Snapdragon Auto 5G Modem-RF Gen 2 Affected: Snapdragon X53 5G Modem-RF System Affected: Snapdragon X55 5G Modem-RF System Affected: Snapdragon X65 5G Modem-RF System Affected: Snapdragon X70 Modem-RF System Affected: Snapdragon X72 5G Modem-RF System Affected: Snapdragon X75 5G Modem-RF System Affected: Snapdragon X80 5G Modem-RF System Affected: SnapdragonAuto 4GModem Affected: WCD9340 Affected: WCD9341 Affected: WCD9370 Affected: WCD9371 Affected: WCD9375 Affected: WCD9378 Affected: WCD9380 Affected: WCD9385 Affected: WCD9390 Affected: WCD9395 Affected: WCN3950 Affected: WCN3988 Affected: WCN6650 Affected: WCN6755 Affected: WCN7860 Affected: WCN7861 Affected: WCN7880 Affected: WCN7881 Affected: WSA8810 Affected: WSA8815 Affected: WSA8830 Affected: WSA8832 Affected: WSA8835 Affected: WSA8840 Affected: WSA8845 Affected: WSA8845H |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-24084",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-04T15:52:37.419940Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:52:44.474Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Auto",
"Snapdragon Compute",
"Snapdragon Consumer IOT",
"Snapdragon Industrial IOT",
"Snapdragon MDM",
"Snapdragon Mobile",
"Snapdragon WBC"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "5G Fixed Wireless Access Platform"
},
{
"status": "affected",
"version": "AQT1000"
},
{
"status": "affected",
"version": "AR8035"
},
{
"status": "affected",
"version": "FastConnect 6200"
},
{
"status": "affected",
"version": "FastConnect 6700"
},
{
"status": "affected",
"version": "FastConnect 6800"
},
{
"status": "affected",
"version": "FastConnect 6900"
},
{
"status": "affected",
"version": "FastConnect 7800"
},
{
"status": "affected",
"version": "FWA Gen 3 Ultra Platform"
},
{
"status": "affected",
"version": "Milos"
},
{
"status": "affected",
"version": "Netrani"
},
{
"status": "affected",
"version": "Orne"
},
{
"status": "affected",
"version": "Palawan25"
},
{
"status": "affected",
"version": "QCA6174A"
},
{
"status": "affected",
"version": "QCA6391"
},
{
"status": "affected",
"version": "QCA6420"
},
{
"status": "affected",
"version": "QCA6430"
},
{
"status": "affected",
"version": "QCA6574AU"
},
{
"status": "affected",
"version": "QCA6584AU"
},
{
"status": "affected",
"version": "QCA6595AU"
},
{
"status": "affected",
"version": "QCA6678AQ"
},
{
"status": "affected",
"version": "QCA6688AQ"
},
{
"status": "affected",
"version": "QCA6696"
},
{
"status": "affected",
"version": "QCA6698AQ"
},
{
"status": "affected",
"version": "QCA6698AU"
},
{
"status": "affected",
"version": "QCA6797AQ"
},
{
"status": "affected",
"version": "QCA8081"
},
{
"status": "affected",
"version": "QCA8337"
},
{
"status": "affected",
"version": "QCC710"
},
{
"status": "affected",
"version": "QCM4490"
},
{
"status": "affected",
"version": "QCM5430"
},
{
"status": "affected",
"version": "QCM6490"
},
{
"status": "affected",
"version": "QCN6024"
},
{
"status": "affected",
"version": "QCN6224"
},
{
"status": "affected",
"version": "QCN6274"
},
{
"status": "affected",
"version": "QCN9011"
},
{
"status": "affected",
"version": "QCN9012"
},
{
"status": "affected",
"version": "QCN9024"
},
{
"status": "affected",
"version": "QCS4490"
},
{
"status": "affected",
"version": "QCS8550"
},
{
"status": "affected",
"version": "QFW7114"
},
{
"status": "affected",
"version": "QFW7124"
},
{
"status": "affected",
"version": "QMP1000"
},
{
"status": "affected",
"version": "Qualcomm Video Collaboration VC3 Platform"
},
{
"status": "affected",
"version": "SD 8 Gen1 5G"
},
{
"status": "affected",
"version": "SDX57M"
},
{
"status": "affected",
"version": "SDX61"
},
{
"status": "affected",
"version": "SDX71M"
},
{
"status": "affected",
"version": "SM6650P"
},
{
"status": "affected",
"version": "SM7325P"
},
{
"status": "affected",
"version": "SM7435"
},
{
"status": "affected",
"version": "SM7550"
},
{
"status": "affected",
"version": "SM7550P"
},
{
"status": "affected",
"version": "SM7635P"
},
{
"status": "affected",
"version": "SM7675"
},
{
"status": "affected",
"version": "SM7675P"
},
{
"status": "affected",
"version": "SM8475P"
},
{
"status": "affected",
"version": "SM8550P"
},
{
"status": "affected",
"version": "SM8635"
},
{
"status": "affected",
"version": "SM8635P"
},
{
"status": "affected",
"version": "SM8650Q"
},
{
"status": "affected",
"version": "SM8750P"
},
{
"status": "affected",
"version": "Snapdragon 4 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 4 Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 480 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 480+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 6 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 6 Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 6 Gen 4 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 690 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 695 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 7 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 7+ Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 778G 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 778G+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 782G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 7c+ Gen 3 Compute"
},
{
"status": "affected",
"version": "Snapdragon 7s Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Elite"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 3 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8+ Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8+ Gen 2 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 865 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 865+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 870 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 888 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 888+ 5G Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 8c Compute Platform \"Poipu Lite\""
},
{
"status": "affected",
"version": "Snapdragon 8cx Compute Platform"
},
{
"status": "affected",
"version": "Snapdragon 8cx Gen 2 5G Compute Platform \"Poipu Pro\""
},
{
"status": "affected",
"version": "Snapdragon Auto 5G Modem-RF"
},
{
"status": "affected",
"version": "Snapdragon Auto 5G Modem-RF Gen 2"
},
{
"status": "affected",
"version": "Snapdragon X53 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X55 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X65 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X70 Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X72 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X75 5G Modem-RF System"
},
{
"status": "affected",
"version": "Snapdragon X80 5G Modem-RF System"
},
{
"status": "affected",
"version": "SnapdragonAuto 4GModem"
},
{
"status": "affected",
"version": "WCD9340"
},
{
"status": "affected",
"version": "WCD9341"
},
{
"status": "affected",
"version": "WCD9370"
},
{
"status": "affected",
"version": "WCD9371"
},
{
"status": "affected",
"version": "WCD9375"
},
{
"status": "affected",
"version": "WCD9378"
},
{
"status": "affected",
"version": "WCD9380"
},
{
"status": "affected",
"version": "WCD9385"
},
{
"status": "affected",
"version": "WCD9390"
},
{
"status": "affected",
"version": "WCD9395"
},
{
"status": "affected",
"version": "WCN3950"
},
{
"status": "affected",
"version": "WCN3988"
},
{
"status": "affected",
"version": "WCN6650"
},
{
"status": "affected",
"version": "WCN6755"
},
{
"status": "affected",
"version": "WCN7860"
},
{
"status": "affected",
"version": "WCN7861"
},
{
"status": "affected",
"version": "WCN7880"
},
{
"status": "affected",
"version": "WCN7881"
},
{
"status": "affected",
"version": "WSA8810"
},
{
"status": "affected",
"version": "WSA8815"
},
{
"status": "affected",
"version": "WSA8830"
},
{
"status": "affected",
"version": "WSA8832"
},
{
"status": "affected",
"version": "WSA8835"
},
{
"status": "affected",
"version": "WSA8840"
},
{
"status": "affected",
"version": "WSA8845"
},
{
"status": "affected",
"version": "WSA8845H"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1294",
"description": "CWE-1294: Insecure Security Identifier Mechanism",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-04T15:07:20.849Z",
"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"shortName": "qualcomm"
},
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2026-bulletin.html"
}
],
"title": "Insecure Security Identifier Mechanism in Multi-Mode Call Processor"
}
},
"cveMetadata": {
"assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"assignerShortName": "qualcomm",
"cveId": "CVE-2026-24084",
"datePublished": "2026-08-04T15:07:20.849Z",
"dateReserved": "2026-01-21T12:51:13.996Z",
"dateUpdated": "2026-08-04T15:52:44.474Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-24087 (GCVE-0-2026-24087)
Vulnerability from cvelistv5 – Published: 2026-06-01 22:05 – Updated: 2026-06-02 12:13
VLAI
EPSS
VEX
Title
Improper Validation of Syntactic Correctness of Input in Kernel
Summary
Memory corruption while processing fastboot OEM commands.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-02 12:08 UTC
CWE
- CWE-1286 - Improper Validation of Syntactic Correctness of Input
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon |
Affected:
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-24087",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-02T12:08:06.530295Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T12:13:24.460Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory corruption while processing fastboot OEM commands."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1286",
"description": "CWE-1286: Improper Validation of Syntactic Correctness of Input",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-01T22:05:36.129Z",
"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"shortName": "qualcomm"
},
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2026-bulletin.html"
}
],
"title": "Improper Validation of Syntactic Correctness of Input in Kernel"
}
},
"cveMetadata": {
"assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"assignerShortName": "qualcomm",
"cveId": "CVE-2026-24087",
"datePublished": "2026-06-01T22:05:36.129Z",
"dateReserved": "2026-01-21T12:51:13.996Z",
"dateUpdated": "2026-06-02T12:13:24.460Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…